Search CVEs

Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.

Url redirection to untrusted site ('open redirect') in Microsoft 365 Copilot's Business Chat allows an unauthorized attacker to elevate privileges over a network.

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally.

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally.

CWE-601 URL redirection to untrusted site ('open redirect')

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in LOGON KB Support kb-support.This issue affects KB Support: from n/a through <= 1.6.7.

A vulnerability was determined in ericc-ch copilot-api up to 0.7.0. This impacts an unknown function of the file /token of the component Header Handler. Executing a manipulation of the argument Host c

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway

Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.